OpenExamsFREE PRACTICE — ANY EXAM

BCS Practitioner Certificate in Data Protection — Requirements & Free Practice

US · License preparation

100 free questions · Answer explanations · No signup required

Loading selected examination banks…

Choose what to practice

Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements

Licenses, application pathways and examination requirements

Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.

BCS Practitioner Certificate in Data Protection

Licensing authority: BCS, The Chartered Institute for IT

Initial by examination
BCS Practitioner Certificate in Data Protection
Assessment
One supervised closed-book multiple-choice examination, 90 minutes, pass mark 65% (26/40); no separate practical, writing or performance assessment is specified for this award. Reasonable adjustments and additional time may be requested under BCS policy, including English as a second language.
Certificate
Successful candidates obtain their BCS e-certificate through the BCS candidate portal; registration requires an accurate individual email address.
Delivery
BCS advertises worldwide Pearson VUE test centres and direct BCS sitting. The syllabus allows supervised digital or paper delivery; the public page advertises a digital closed-book examination. Pearson's BCS program also offers OnVUE online proctoring subject to its program policies, system test, technology, private testing-space and matching government-issued photo-ID requirements.
Preparation
Accredited training is strongly recommended; self-study is explicitly permitted. The Foundation Certificate in Data Protection is desirable but not mandatory and is not a prerequisite examination leaf. Candidates need a good standard of written English and maths.
Registration
Book directly with BCS by telephone +44 (0)1793 417417, through an accredited provider, or with Pearson VUE. Pearson scheduling requires an account or login. Exam access is limited to the registered date and time; availability is subject to an actual booked appointment, not guaranteed seats throughout the requested horizon.
Scope
One current English v9.9 examination for the BCS Practitioner Certificate in Data Protection; a globally accessible professional certification in the US shared-exam scope, not a US statutory licence.
Version Applicability
The current BCS certificate page explicitly lists v9.8 and v9.9 live and links to the downloaded v9.9 syllabus. Only v9.9 is delivered here. Its March 2026 document-creation statement and legislation dates are not examination effective dates. Current BCS exam and delivery pages and targeted BCS retirement/withdrawal searches disclosed no applicable v9.9 retirement announcement. The minimum evaluation-date horizon is 2027-01-28 and the task additionally excludes retirement before 2027-03-01; no published v9.9 end date was found, so validThrough remains null. Future seats during 2026-11-25 through 2027-01-31 require scheduling confirmation.

BCS Practitioner Certificate in Data Protection

Provider
BCS; Pearson VUE is an authorized delivery channel.
Format
Supervised closed-book multiple-choice examination; digital or paper based in the v9.9 syllabus, with digital delivery advertised on the public certificate page.
Exam questions
Total questions: 40.
Time limit
90 minutes; adjustments or additional time may be requested under BCS policy.
Passing score
65% (26/40).
Examination outline
  • Context of data protection legislation (7.5%)
    • Concepts of data protection and privacy
    • History of data protection in the UK
    • Territorial scope and jurisdiction of GDPR
    • When a representative of the controller is needed
  • Principles of data protection and applicable terminology (5%)
    • Key terminology
    • UK GDPR principles regulating personal-data processing
  • Lawful bases for processing personal data (5%)
    • Article 6 lawful bases
    • Conditions for processing special category data
    • Rules for processing criminal offence data
  • Accountability principle (15%)
    • Accountability and data governance obligations
    • Purpose of DPIAs and prior consultation
    • Conducting a DPIA
    • Records of processing activity
    • Privacy notices
    • Data protection by design and by default
    • Appropriate information security measures
    • Designation, position and tasks of the DPO
    • DPO monitoring, privacy management and risk
  • Obligations of controllers, joint controllers and data processors (10%)
    • Controller and processor obligations
    • Joint controllers
    • Processing under the authority of a controller or processor
    • Contracts with processors
  • International data transfers under EU and UK GDPR (2.5%)
    • Third-country transfers and their mechanisms
  • Data subject rights (5%)
    • Key individual rights requiring detailed knowledge
    • Additional rights requiring awareness
    • Restrictions and exemptions affecting rights
    • Fundamental rights of information requests
  • The role of independent supervisory authorities and the ICO (7.5%)
    • Role and independence of ISAs
    • Role of the Information Commissioner's Office
  • Breaches, enforcement and liability (12.5%)
    • Personal data breaches and reporting information
    • Obligations to report breaches
    • Handling data protection complaints
    • Sanctions for breaches or complaints
    • Liabilities
    • Tribunals and judicial courts
  • Processing of personal data in relation to children (2.5%)
    • Application of data protection legislation to children
  • Specific provisions in data protection legislation of particular relevance to public authorities (7.5%)
    • Public authorities, public bodies and lawful basis
    • DPOs for public authorities
    • Awareness of exemptions for health, social work and education
  • Privacy and Electronic Communications (EC Directive) Regulations (PECR) 2003 and amendments subsequent to 2021 (5%)
    • Relationship between PECR and GDPR
  • Application of data protection legislation in key areas of industry (10%)
    • ICO Employment Practices Guidance
    • Video surveillance and CCTV
    • Cookies and digital technologies
    • Data sharing practices and the ICO Code of Practice
  • Artificial Intelligence (AI) and the processing of personal data (5%)
    • Benefits and risks of AI
    • DPIAs where AI is used
    • AI impacts on data protection principles and concepts
Examination sources